Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: TxMyK5okFnef8BzXtFQrnyE1MP2N6zzE6jDk8eiBt3g=
Subject key identifier: 92:0C:5B:99:72:81:DF:FA:C4:39:4E:E7:E6:6F:71:A4:6C:1A:55:1C
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 019FA974F7EE9F07C5C835F0D80F4131FD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:00:42 +0000
Manifest this update: Tue 28 Jul 2026 16:00:42 +0000
Manifest next update: Wed 29 Jul 2026 16:00:42 +0000
Files and hashes: 1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: 5P1F0AN+fsKLtJmXMOfqFxo9109IKqXDnAR19+thGxQ=)
3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:f7:ee:9f:07:c5:c8:35:f0:d8:0f:41:31:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jul 28 16:00:42 2026 GMT
Not After : Jul 29 16:00:42 2026 GMT
Subject: CN=920c5b997281dffac4394ee7e66f71a46c1a551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:b4:09:95:ea:69:77:c0:33:65:12:28:b0:
45:9a:d2:31:53:cd:11:d5:da:68:6e:e5:87:58:b9:
f4:9c:db:46:a1:ed:2b:02:21:35:a2:59:6b:93:e1:
6e:14:85:63:20:14:27:09:97:3c:f7:71:33:39:73:
a1:e6:d3:7a:a9:e4:d8:8d:a8:78:06:01:a5:a0:52:
07:48:5b:2f:8f:af:7c:9e:32:62:43:de:5c:1a:79:
08:c5:27:90:4d:9f:03:d6:53:09:03:7a:13:18:53:
5d:1e:e5:2f:a6:8b:80:4b:5a:7b:8c:f5:b0:c4:cf:
b9:cb:7e:e9:eb:2b:17:9a:a1:16:d0:17:d2:3e:19:
97:ff:9a:70:a1:90:91:78:e1:cb:04:3f:f0:bb:c4:
6a:6e:7d:32:b5:b8:27:e8:0b:b5:2d:69:b8:3b:85:
60:2d:6f:87:7b:16:bf:c7:2d:3a:7b:97:f9:77:ab:
75:9b:28:fc:94:5c:32:b0:1e:33:e4:b7:59:fb:90:
30:f5:f4:1f:8d:c6:e2:cd:34:cd:b3:31:de:87:5c:
69:ac:a7:7d:00:e6:6e:4c:f1:ae:77:17:5c:55:b0:
90:15:17:04:ec:99:e4:27:d1:4d:3c:18:9b:0c:08:
0e:89:5b:3c:91:d1:26:e5:f6:53:7b:ff:47:ca:6a:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:5B:99:72:81:DF:FA:C4:39:4E:E7:E6:6F:71:A4:6C:1A:55:1C
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:48:23:e6:85:94:fd:22:1f:01:72:a0:2a:ea:db:63:4b:
50:1d:fa:4a:04:4d:6b:1a:c2:c8:6c:06:95:04:6e:b7:a3:4e:
45:21:a6:b8:60:8f:ef:94:f0:5b:41:83:04:de:79:82:6c:b0:
27:48:9a:be:6f:46:07:71:8f:e5:88:ec:5a:c9:a7:a3:38:7a:
c6:ab:fd:1a:33:25:ec:fa:5e:81:37:b9:28:21:05:3d:fe:ba:
2c:a3:e9:27:c6:89:5a:5b:30:13:49:19:16:d1:64:12:2e:1b:
7e:d4:e2:c3:53:2f:05:70:ff:b7:31:78:5b:37:c5:31:53:b5:
b2:a4:81:c4:ef:95:81:2b:7b:1b:67:a3:39:11:d0:87:b3:e5:
ed:1f:8b:e8:11:f1:7e:1d:0e:34:a3:ec:1d:62:a0:05:76:66:
55:ae:e8:69:f8:64:75:a7:11:26:83:bf:ef:06:8c:3d:d6:fc:
4a:08:10:c0:87:f1:a2:ac:22:2a:72:58:2c:7e:37:59:be:a2:
00:f0:00:df:ea:d5:70:5d:c6:80:e8:b2:13:88:ae:4c:62:cb:
12:ef:ed:bb:93:53:91:f5:fe:11:e5:6b:b4:7b:91:e5:b5:d3:
d0:1c:d1:a3:44:1c:80:db:58:b8:b0:ca:ae:12:df:bd:47:3a:
4c:34:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:51 2026 by rpki-client